Lucene search

K
osvGoogleOSV:GO-2024-2540
HistoryJun 28, 2024 - 3:28 p.m.

Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira

2024-06-2815:28:53
Google
osv.dev
1
mattermost
jira
plugin
security
level
github

4.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira

4.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

Related for OSV:GO-2024-2540